[
https://issues.apache.org/jira/browse/ARIES-1974?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17084938#comment-17084938
]
ASF subversion and git services commented on ARIES-1974:
--------------------------------------------------------
Commit fa67be9471699d4789f098e7450f23732065d579 in aries-jax-rs-whiteboard's
branch refs/heads/master from Markus Rathgeb
[ https://gitbox.apache.org/repos/asf?p=aries-jax-rs-whiteboard.git;h=fa67be9 ]
[ARIES-1974] do not replace loopback addresses
Signed-off-by: Markus Rathgeb <maggu2...@gmail.com>
> loopback addresses should not be replaced
> -----------------------------------------
>
> Key: ARIES-1974
> URL: https://issues.apache.org/jira/browse/ARIES-1974
> Project: Aries
> Issue Type: Bug
> Components: jax-rs-whiteboard
> Affects Versions: jax-rs-whiteboard-1.0.5
> Reporter: Markus Rathgeb
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The CXF code that is used by the implementation replaces the address
> "127.0.0.1" by localhost for the UriBuilder.
> This can be disabled or enabled by an option but it defaults to true.
> If the host is replaced and you build a "location created" reply using the
> URI builder the host used by the request and response can differ.
> If the client that sends the request uses the response location to access a
> resource browser will block that request because of CORS.
> For further details and examples please have a look at:
> https://issues.apache.org/jira/browse/CXF-8190
> It would be great if the Aries JAX-RS Whiteboard implementation could set
> this option to false to allow expected URI builder usage:
> {{replace.loopback.address.with.localhost=false}}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
